SUSPICIOUS — TikTok_You-4.4-46.8.3.apk
SUSPICIOUS — TikTok_You-4.4-46.8.3.apk is a zip sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (35/100). 1 of 54 detection engines flagged it.
Identification
- SHA-256:
288ca3e34cb15c7da5d9cfe98c15fd10a38e7159d896b6c123e3818eaae72de4 - SHA-1:
1ca08e9f4274fe6518f05088e1c7ecdde970eb04 - MD5:
46aba997c65744f7ac8b92c2919dc1f6 - ssdeep:
786432:WgdCgASxQnIlB6cVl51zofAOFaMH0MHaYDwgoFVnetX6Sxxtsb0qm3sIdpGE:rCOxQnIKc7fofEwh6YD2eJsb0jBdpGE - TLSH:
T1237733AB4F8819713EF1E8253962EB9B9C090ED3C106BEAC514275BEA93C444F7057C6 - Submitted as: TikTok_You-4.4-46.8.3.apk
- File type: zip · Size: 33554432 bytes
- Verdict: suspicious (35/100)
Detections (1 of 54 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
Why this verdict
The suspicious score of 35/100 is the fusion of 3 weighted signals:
- MalwareAnalyser heuristics (entropy/packer) flagged high-entropy-blob (rule
high-entropy-blob) - engine signal, weight 0.35, confidence 0.70 - Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
- archive:unopenable — contents were NOT scanned: listing failed: Command failed: 7zz l -slt -pzippw -- /tmp/tl-collect-0SYQrl/sample.archive - static signal, weight 0.00, confidence 0.00
Dynamic analysis
This zip is a container, so it was not detonated itself. Its extracted members were re-submitted and analyzed as their own samples, and the runtime behaviour lives on those reports.
Embedded domains
- nz.au
- fu.no
- ly.io
- jz.au
- 25.fi
- z.io
- c.io
- y.de
- k.ru
- 0.ga
- h.sg
- i.me
File paths
- E:\:
- k:\dN
- F:\[T
- K:\E`
- K:\W
- T:\TrZ
- d:\ey
- D:\A
- U:\%]f
- A:\W;m
- r:\(_
- C:\PS
- I:\E
- Q:\6,
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report